Chief Information Security Officer (CISO)

Customers Bank - Malvern, PA

Full-time - Senior

Malvern, PA

11-50 employees

Credit Intermediation and Related Activities

About the position

The Chief Information Security Officer (CISO) at Customers Bank is responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure the protection of information assets and technologies. This role is crucial for managing risk, implementing security measures, and ensuring compliance with various regulations and standards. The CISO will lead the information security function across the company, ensuring consistent and high-quality information security management in support of business goals.

Responsibilities

• Develop and implement a strategic, long-term information security strategy and roadmap.
• Lead the information security function across the company to ensure consistent and high-quality information security management.
• Establish and enforce policies, procedures, and standards to enhance the security posture of the organization.
• Oversee tools and platforms implementations to ensure efficacy in both implementation and operation.
• Identify, assess, and prioritize information security risks.
• Collaborate with stakeholders to mitigate risks to acceptable levels.
• Oversee the development and execution of risk management strategies and plans.
• Perform technology risk assessments on the bank's information system and business processes.
• Direct the design and implementation of security systems and controls to protect the organization's information and technology assets.
• Manage and lead incident response activities, ensuring timely resolution and root cause analysis of security incidents.
• Ensure accurate and complete reporting on the information security program for the bank to the Board of Directors and internal committees.
• Ensure appropriate frameworks and testing is in place for application security policies and standards.
• Ensure compliance with relevant security standards and regulations.
• Develop specific information security guidelines and policies to meet operational and regulatory requirements.
• Communicate security risks and solutions to executive management, the board of directors, and employees.
• Oversee the security awareness programs to educate employees about information security.
• Execute tabletop exercises to ensure preparedness for threat responses, communications, and crisis management.
• Work closely with the IT department and other stakeholders to ensure seamless integration of security controls into IT infrastructure and operations.
• Stay current with emerging security trends, threats, and technology solutions.

Requirements

• Bachelor's degree in Computer Science, Information Security, or a related field; advanced degree preferred.
• Minimum of 10 years of experience in information security and IT roles, with at least 5 years in a senior leadership position.
• Knowledgeable with industry-specific banking regulations and guidelines (FFIEC), SEC requirements, data privacy regulations (e.g. GLBA and CCPA).
• Experience running regulatory remediation programs as the primary interface with Regulators.
• Professional security management certification (e.g., CISSP, CISM, CISA) is highly desirable.
• Demonstrated ability to develop and execute an information security strategy and roadmap.
• Strong knowledge of regulatory requirements and information security management frameworks.
• Proven experience in managing security operations, incident response, crisis management, and risk management.
• Exceptional leadership, communication, and interpersonal skills.
• Ability to interact with and influence all levels of the organization, including executive management and the board of directors.
• High level of integrity, trust, and a strong commitment to the organization's mission and values.

Benefits

• Personal development plans for team members
• Hybrid work model with set office days
• Dedicated personal service for customers
• Innovative tools and technology for market responsiveness